mcc0nnell opened a new pull request, #845:
URL: https://github.com/apache/celix/pull/845

   Fixes #824.
   
   This supersedes #844 and incorporates @PengZheng’s feedback by using Conan’s 
built-in cyclone_1.6 deployer directly instead of a custom SBOM generation 
script.
   
   The Conan CI now generates a CycloneDX 1.6 SBOM with:
   
   conan install . -o celix/*:build_all=True --deployer=cyclone_1.6 
--deployer-folder=sbom -b missing -o *:shared=True
   
   The generated sbom/sbom-cyclonedx-1.6.json is published as the 
celix-conan-sbom CI artifact.
   
   Also adds a short document describing how the SBOM is generated and 
published.
   
   Validation:
   
   * confirmed CycloneDX 1.6 output path and format
   * kept the change scoped to the existing Conan CI
   * no custom generator or lockfile handling


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to